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REMARKS 

Claims 1, 2, 3, 12, 13, and 15 are retained from the original 
application, but Claims 13 and 15 have been amended to produce new 
amended claims that are not multiply dependent in order to reduce 
official fees. Once examination on the merits has begun, the 
Applicants may elect to amend newly amended Claim 13 and 15 to make 
these claims multiply dependent or to add additional claims to this 
application to provide coverage similar to, broader than, or 
narrower than the present claims. Claims 1, 3, 12 and 13 have been 
amended to correct typographical errors. 

During the prosecution of this application's parent application, the 
Examiner has rejected claim 1 as being unpatentable over "Mobile 
Code Security" (Rubin) in view of USP 6,076,166 (Moshfeghi) . 
However, Rubin simply seems to be a general background description 
of mobile code security that includes a general discussion of the 
sandbox model. Moshfeghi describes the use of user profiles in 
relation to a dynamic web site, but in Moshfeghi 's system the 
profiles are stored on the server side (see item 28, Figure 1) . 

Claim 1 is directed to how access may be controlled to user profiles 
that are stored on the client side. The solution adopted involves 
the use of an extended sandbox but such an application of a sandbox 
is not described in Rubin. As such, the combination of Rubin and 
Moshfeghi does not lead the invention as claimed broadly in claim 1. 

USP 6,018,724 (Arent) is closer prior art than is Moshfeghi, and 
does describe the use of user profile files that are apparently 
stored in a client computer (see Column 7, lines 38-40 and Column 
13, lines 2-5), and that access to such files needs to be under user 
control. Arent also talks about the use of u backend connections" 
(see Column 12, line 66) . However, where is there any teaching in 
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Arent as to how the control referred to is implemented and, in 
particular, where is there any mention of the use of a sandbox, 
extended or otherwise? This fact and the fact that Rubin does 
apparently not discuss profile files or service-related applets that 
are downloadable from websites suggests that any viable combination 
of Rubin and Arent would not include "downloading said service 
through said second communication port so that it is received by 
said confined run time environment" as required by claim 1. Indeed, 
Arent seems to stress the importance of locally stored data. See 
Column 7, lines 38-40; Column 4, lines 42-50, and Column 1, lines 
52-54, for example. It is submitted that a person skilled in the 
art would not be motivated to execute a downloaded service in view 
of this teaching. 

Claims 4-11 and 14 have been canceled from this application since 
those claims are being pursued in this application's parent 
application. An IDS citing the art cited in the parent application 
is enclosed. The Applicants retain the right to present any of 
these claims in subsequent amendments to the present application or 
in subsequent divisional or continuation applications. 
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The Commissioner is authorized to charge any additional fees which 
may be required or credit overpayment to deposit account no. 12- 
0415. In particular, if this response is not timely filed, the 
commissioner is authorized to treat this response a including a 
petition to extend the time period pursuant to 37 CFR 1.136(a) 
requesting an extension of time of the number of months necessary to 
make this response timely filed and the petition fee due in 
connection therewith may be charged to deposit account no. 12-0415. 
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